Offensive Analyst - EH

Be part of Stefanini! At Stefanini, we are more than 30,000 geniuses, connected from 41 countries, doing what they love and co-creating a better future.

Responsibilities and attributions Execute Ethical Hacking and Pentesting activities (internal, external, web, mobile, and network). Define methodologies, scopes, and security assessment schedules. Analyze results, prioritize risks, and coordinate remediation plans with the responsible areas. Ensure the proper use of scanning tools and offensive testing. Prepare executive and technical reports for senior management and clients as a result of Pentesting / EH exercises. Keep metrics, KPIs, and offensive security maturity levels updated. Guarantee compliance with regulations, standards, and best practices (ISO 27001, NIST, OWASP, MITRE). Develop and maintain operating procedures to ensure effectiveness in service delivery.

Requirements and qualifications Requirements: Technical English level to interpret specialized documentation. Availability to perform authorized security tests and comply with confidentiality agreements. Analytical skills, critical thinking, effective communication, and teamwork. Desirable certifications: CEH, eJPT, PNPT, OSCP, eWPTX, CPTS, CWES, CAPE, OSEP, OSWE, CRTP, CRTE, CRTO, CRTL, BSCP, and similar. Basic or intermediate knowledge of scripting and programming in Python, Bash, or PowerShell. Ability to prepare technical reports, document findings, and propose remediation plans. Knowledge in identification, exploitation, and mitigation of vulnerabilities. Mastery of methodologies and standards such as OWASP Top 10, PTES, MITRE ATT&CK, and NIST. Knowledge in security testing of web applications, mobile, APIs, Active Directory, and infrastructure. Handling of pentesting tools such as Kali Linux, Nmap, Burp Suite, C2, and Wireshark. Solid knowledge in networks, Linux and Windows operating systems, TCP/IP protocols, and server administration. 3 to 5 years of experience in ethical hacking, penetration testing, or computer security. Professional or technologist in Systems Engineering, Computer Engineering, Cybersecurity, or related areas.